Author Topic: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...  (Read 90857 times)

0 Members and 1 Guest are viewing this topic.

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
The purpose of this thread is to help/support people with their broken Rigol DS1052E scope.

The most common problem is totally dead scope after unsuccessful firmware "downgrade/upgrade". The only way to recover it is to reprogramm the flash chip (Spansion S29GL064N90TFI04) either via BlackFins's JTAG interface or in external programmer. There is very important part inside the flash with the factory calibration data, which is unique to every unit. These data has to be preserved in a new flash image for proper operation.

Second common issue is partially working scope, which doesn't shows signals correctly after a 100MHz patch (see story of shafri and others for details). These problems are caused by corrupted factory calibraion data which may get corrupted probably when patching via serial cable (especially if you accidentally hit the ENTER instead of sending correct <LF> char). This is the reason, why I strongly recommend: DO NOT USE SERIAL CABLE!

Some people ask me about how to hack scope HW version "xy", FW version "xx.xx.xx". The fact is, that different firmware supports different HW version, so there is always some risk when you are running the FW that doesn't support your HW version. Please don't ask me if it's safe to downgrade to FW 02.02, if you have HW version "57" or "58" - I don't know

Here's the table which FW supports which HW. Higher FW supports all older HW versions.
HW version    FW version
58
00.02.04.01.00
57
00.02.04.00.03
07
00.02.02.02.00


WARNING: Do not experiment with undocumented SCPI commands especially if you don't know the correct syntax. You can corrupt or lost some of imortant calibraion data!


Repair history
repair date        model        (nick)name              details
08/28/2010 DS1052E lynx / SE bricked after unsuccessful FW upgrade
10/08/2010 DS1052E dimlow / UK corrupted calibration data (same as shafri: problem description)
10/08/2010 DS1052E shafri (Mechatrommer) corrupted calibration data (problem description)
09/20/2010 DS1052E jasper / US bricked after unsuccessful FW upgrade
09/26/2010 DS1052E Ben / AU bricked after unsuccessful FW upgrade
10/26/2010 DS1052E Viktor / BY bricked after unsuccessful FW upgrade
10/27/2010 DS1052E Giovambattista / IT bricked after unsuccessful FW upgrade
11/02/2010 DS1052E mainer / AT bricked after unsuccessful FW upgrade
11/03/2010 DS1052E Larry / US bricked after unsuccessful FW upgrade
11/22/2010 DS1052E Peter / AU bricked after unsuccessful FW upgrade
11/23/2010 DS1052E teixeluis corrupted calibration data (problem description)
01/03/2011 DS1102E Mohammad / IR bricked after unsuccessful FW upgrade
02/02/2011 DS1052E Chris / US bricked after unsuccessful FW upgrade
02/03/2011 DS1052E Mel / UK bricked after unsuccessful FW upgrade
02/06/2011 DS1102E Marlon / US bricked after unsuccessful FW upgrade
02/11/2011 DS1052E nasser32 corrupted calibration data (same as shafri: problem description)
02/21/2011 DS1052E Brian/ US bricked after unsuccessful FW upgrade
03/09/2011 DS1052E David / AU bricked after unsuccessful FW upgrade
04/28/2011 DS1052E Denis / RU bricked after unsuccessful FW upgrade
05/05/2011 DS1052E Hans / NL bricked after unsuccessful FW upgrade
06/01/2011 DS1052D Rob / NL corrupted calibration data 
06/29/2011 DS1052E Andres / ES bricked after unsuccessful FW upgrade
10/01/2011 DS1052E Ray / UK bricked after unsuccessful FW upgrade
10/16/2011 DS1052E Jeremy / AU corrupted calibration data 
10/17/2011 DS1052E Doug / US corrupted calibration data 
11/24/2011 DS1052E Aleksandr / RU bricked after unsuccessful FW upgrade
04/10/2012 DS1052E Rob / UK corrupted calibration data 
...
02/11/2019 DS1052E Bruzzel / DE wrong firmware flashed
02/17/2019 DS1042C Taras / UA bricked after unsuccessful FW upgrade
02/21/2019 DS1302CA ivi_yak / UA wrong firmware flashed
« Last Edit: February 22, 2019, 06:57:38 pm by drieg »
Bricked Rigol? This thread might be of any help.
 
The following users thanked this post: papousek, wenpaul, ivi_yak

Offline dimlow

  • Frequent Contributor
  • **
  • Posts: 301
  • Country: gb
  • Likes to be thought of as
    • Dimlow Ponders
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #1 on: September 28, 2010, 09:10:17 pm »
Well Drieg has certainly got my hopes up, yesterday i required a scope, so i used my Uni-T UT81B, but it didn't quite meet my needs. Cant look at a 20Mhz signal with a 10Mhz Scope! BTW i love this little meter for when im poking about with micro controllers on a breadboard. I guess a should post my views of it in the UT81B thread.
« Last Edit: September 28, 2010, 09:12:46 pm by dimlow »
 
The following users thanked this post: ivi_yak

Offline nebarnix

  • Newbie
  • Posts: 1
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #2 on: September 29, 2010, 12:11:30 am »
 :o Drieg, you have really helped me out! I got the chip back yesterday and I think I soldered it back in record time. I couldn't wait to assemble to scope properly and left the power supply hanging off of the table. Guess what, the scope is alive again!! Thank you!!

To everyone else. my scope was broken when I attempted to upgrade the firmware. I Upgraded, rebooted, and them bam... nothing. Blank. I will admit we had a few beers as an old friend was in town so I was sure that somehow I had put the wrong image on the flash drive. I checked and rechecked but all seemed in order. Its not even my scope so it was somewhat embarrassing to do this in front of a bunch of people including the owner of the scope and have to say "Oh sorry... guess you don't have a scope anymore!".

After trying unsuccessfully for several months with a blackfin programmer and a half-built homebrew programmer in VHDL I met Drieg and I sent my poor blank spansion flash chip off to go see Europe and start a new life there. After becoming sufficiently cultured it crossed the Atlantic once more (I believe that it was quite homesick) and it is perfect working condition!  Thanks so much Drieg! I am lucky that the factory calibration data was not erased  :D

-Nebarnix
 

Offline Waifian

  • Regular Contributor
  • *
  • Posts: 50
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #3 on: September 29, 2010, 01:04:38 am »
Quote
Second common issue is partially working scope, which doesn't shows signals correctly after a 100MHz patch (see story of shafri and others for details). These problems are caused by corrupted factory calibraion data which may get corrupted probably when patching via serial cable (especially if you accidentally hit the ENTER instead of sending correct <LF> char). Currently I'm working on a solution how to correct these data without the need of even opening the scope;)
Would that include a square wave frome a function generator that appeared as a sine wave on the rigol scope. I didn't know what to think. I am still not sure if it was the function generator or the scope as the scope seems okay... I did run the recalibration tool a few times because I also had the issue of the vertical system being wierd at the 5volt per division mark. It was about a volt below ground with nothing connected and seemed to be the worst at the 5volt per division area. After recalibrating it again it seems okay.... I am not sure if my scope is shoddy now or not...   ???
 

Offline armandas

  • Frequent Contributor
  • **
  • Posts: 336
  • Country: jp
    • My projects
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #4 on: September 29, 2010, 01:42:32 am »
i deleted my previous comment, its nonsense!
pls keep this thread clean guys!

What about all other threads in this forum, shafri? ;)
 

Online NiHaoMike

  • Super Contributor
  • ***
  • Posts: 4995
  • Country: us
  • "Don't turn it on - Take it apart!"
    • Facebook Page
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #5 on: September 29, 2010, 09:02:55 am »
Maybe read the calibration data, keep a backup in a safe place, and just try randomly changing values to see what they do? Not much to lose if it's already unusable.
Cryptocurrency has taught me to love math and at the same time be baffled by it.

Cryptocurrency lesson 0: Altcoins and Bitcoin are not the same thing.
 

Offline dimlow

  • Frequent Contributor
  • **
  • Posts: 301
  • Country: gb
  • Likes to be thought of as
    • Dimlow Ponders
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #6 on: September 29, 2010, 10:20:32 pm »
I Just thought id bump this tread as Drieg has updated his first post asking for help. He needs that data for my scope and id love to get it fixed, so please if you have one of the scopes get in contact.
« Last Edit: September 29, 2010, 10:23:27 pm by dimlow »
 

Offline yyao

  • Contributor
  • Posts: 12
    • My website
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #7 on: October 03, 2010, 01:55:13 am »
Like I said in the other thread (https://www.eevblog.com/forum/index.php?topic=553.msg18626#msg18626), this was the situation I was in:
  • Came with firmware 2.04 SP1
  • Has been downgraded to firmware 2.02 SP2 for changing the model number
  • Exhibits repetitive noise at high sampling rates after self calibration
  • Cannot be upgraded to 2.04 SP1 (because the firmware isn't available to the public yet)

Although it doesn't provide you with an unusable scope, it is kind of annoying.
« Last Edit: October 06, 2010, 12:25:59 am by yyao »
Yi Yao
 

Offline d0ss

  • Contributor
  • Posts: 18
  • Country: gb
  • Maybe
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #8 on: October 05, 2010, 12:57:52 am »
Like I said in the other thread (https://www.eevblog.com/forum/index.php?topic=553.msg18626#msg18626), drieg has a way to fix your scope if you have one that:
  • Came with firmware 2.04 SP1
  • Has been downgraded to firmware 2.02 SP2 for changing the model number
  • Exhibits repetitive noise at high sampling rates after self calibration
  • Cannot be upgraded to 2.04 SP1 (because the firmware isn't available to the public yet)

Just post your problem on this thread and drieg or someone else may be able to assist you.


I've got the same issue as above, and would love to get it fixed. I've tried asking Rigol for the 2.04 SP1 firmware no reply as of yet. Serial starts with DS1ED123, I would appreciate any help given. Thanks
 

Offline Polossatik

  • Frequent Contributor
  • **
  • Posts: 286
  • Country: be
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #9 on: October 05, 2010, 05:23:04 am »
I have a DS1ED121xxxxxx scope , if you ever need info from that serial range, let me know.
Real Circuit design time in minutes= (2 + Nscopes) Testim + (40 +120 Kbrewski) Nfriends

Testim = estimated time in minutes Nscopes= number of oscilloscopes present Kbrewski = linear approx of the nonlinear beer effect Nfriends = number of circuit design friends present
 

Offline Zap

  • Contributor
  • Posts: 9
  • Country: au
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #10 on: October 08, 2010, 12:25:25 am »
Drieg has helped me endlessly in my quest to fix my CRO. We have not got there currently ( but that's totally through my lack of skills).

I hope one day i get to buy him a beer and thank him in person because he has helped me so much with advice and personal time and effort. Its so nice to see that there is genuinely fantastic people out there.

If i manage to get it working again i will name thee "Driegol 1053E enhanced" :)
Forever learning
 

Offline dimlow

  • Frequent Contributor
  • **
  • Posts: 301
  • Country: gb
  • Likes to be thought of as
    • Dimlow Ponders
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #11 on: October 08, 2010, 03:28:08 am »
Yep drieg is one of the good guys. Im hoping to have my scope sorted soon. Without him id be stuck with this dead scope for ever.
 

Offline wolen

  • Newbie
  • Posts: 3
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #12 on: October 09, 2010, 07:02:41 am »
Dear drieg at I too have spoiled Rigol DS1052E by attempt to change firmware with E on D. >:(
Write please in detail how to restore firmware by a simple way.
At inclusion the white screen. Whether necessarily to take a microcircuit?
Send if it is possible firmware for the chip
I live in Russia, English I know poorly, excuse.
wolend1@mail.ru
 

Offline wolen

  • Newbie
  • Posts: 3
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #13 on: October 09, 2010, 09:05:41 pm »
Dear  drieg I have bought in China (mail) Rigol DS1052E
He well worked.
I have read http: // embedders.org/content/kak-iz-rigol-ds10 52e-sdelat-rigol-ds1102e and has made it.
It has turned out. He well worked. (large difference has not noticed except for 2 n?/d and DS1052E - DS1102E) :)
Then I have tried to change firmware DS1052D in DS1052E through WINHEX and to stitch to her.
It has turned out. He well worked. (nothing has changed except for DS1102E - DS1052D) (LA has not appeared:)) ;D
Then I have tried to replace firmware from another (Not Rigol) I any more do not remember what, it seems and to stitch it(him).
The size firmware was 6 mbytes (on Rigol 4 mbytes)
Has failed. ???? ???????? has passed, I have switched off ??????????? and has switched on it(him) the simply light screen has appeared. There is no reaction to buttons. >:(
« Last Edit: October 10, 2010, 08:12:16 pm by wolen »
 

Offline dimlow

  • Frequent Contributor
  • **
  • Posts: 301
  • Country: gb
  • Likes to be thought of as
    • Dimlow Ponders
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #14 on: October 09, 2010, 09:43:39 pm »
@Shafi

Yes. Drieg has sent me the fix for my scope, i have tested it and it seems to be working. I still need to test some more. I did start some further tests and i was going to test it against my 400Mhz HP54502A scope, but when i turned on my old reliable, she is no longer reliable. It popped up with Calibration Memory checksum error. So i spent quite a few hours trying to recalibrate it and failing, it seems that the old HP is dead now  ???

Anyway one thing i noticed is that the rigol, when presented with the same waveform on each channel gives different voltage levels. They differ by about .2 Volts. Although the scope does seem to be working, i think accuracy has been lost in the vertical axis.

Further tests and I will report back.
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #15 on: October 10, 2010, 07:57:47 am »
@wolen
I can help you, but you have to desolder the flash chip and send it to me for reprogramming. If you don't have a good hot air rework station around or you are not skilled or brave enough to do it, you can also send me the whole mainboard. PM sent.
« Last Edit: October 10, 2010, 08:03:05 am by drieg »
Bricked Rigol? This thread might be of any help.
 

Offline wolen

  • Newbie
  • Posts: 3
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #16 on: October 10, 2010, 08:41:51 pm »
Large thanks Dear Drieg!
I shall send by mail you mine mainboard.
I hope that mine Rigol DS1052E will work.
« Last Edit: October 10, 2010, 08:43:22 pm by wolen »
 

Offline Mechatrommer

  • Super Contributor
  • ***
  • Posts: 8684
  • Country: my
  • reassessing directives...
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #17 on: October 10, 2010, 09:28:35 pm »
my rigol is fixed now. the vertical offsets that i was report about?... its now gone! my rigol is working 100% fine right now. i'm glad that i have my scope back. Thanx Drieg!
if something can select, how cant it be intelligent? if something is intelligent, how cant it exist?
 
The following users thanked this post: ivi_yak

Offline xoom

  • Regular Contributor
  • *
  • Posts: 109
    • E.xoom
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #18 on: October 10, 2010, 09:34:51 pm »
Nice to hear that :) now anyone can more freely breathe if they brick their scope :)
 

Offline saturation

  • Super Contributor
  • ***
  • Posts: 4788
  • Country: us
  • Doveryai, no proveryai
    • NIST
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #19 on: October 11, 2010, 04:18:30 am »
Great!  Thanks to Drieg, there is hope!  A great start to a full recovery for bricked scopes.

Why is this thread a thumbs down? Its probably the only published solution for a failed hack.
Best Wishes,

 Saturation
 

Offline dimlow

  • Frequent Contributor
  • **
  • Posts: 301
  • Country: gb
  • Likes to be thought of as
    • Dimlow Ponders
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #20 on: October 11, 2010, 05:20:45 am »
Big Thanks to Drieg, Im satisfied that my scope is now working within spec, Another great fix, Your the man,
 

Offline Zap

  • Contributor
  • Posts: 9
  • Country: au
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #21 on: October 20, 2010, 03:01:45 am »
Thanks to Drieg i now (once again) have a scope.... not only a scope but a 100MHz scope.

I totally bricked it, did a poor job of de-soldering the chip ( i thought i would give him a challenge) he fixed the chip however due to my pin abuse i did not managed to re-solder it.
Drieg then went out of his way to re-program another chip for me and send it around the world to Aus and shazam it now works. The amount of effort and advice he has given me is amazing i will be forever in debt of his kindness, the Driegol 1052E enhanced now lives!

Thank you so much!
Forever learning
 

Offline suppersready

  • Contributor
  • Posts: 5
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #22 on: October 20, 2010, 07:33:49 pm »
Like others, i have bricked my DS1052E trying to downgrade the firmware from 02.04.01.02 to 02.02.02

What happens if i send back it to the seller for repairing, my scope is on warranty.

If it's a bad idea i will send the board to you Drieg.

(sorry for my english i am italian)

Thanks drieg for the great job
« Last Edit: October 20, 2010, 07:38:03 pm by suppersready »
 

Offline Zero999

  • Super Contributor
  • ***
  • Posts: 12337
  • Country: gb
  • Hero999
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #23 on: October 20, 2010, 09:27:12 pm »
I would assume performing hacks like this will void any warranty so do it at your own risk and preferably after the warranty period has expired otherwise you have to take responsibility for repairing it.
 

Offline Mechatrommer

  • Super Contributor
  • ***
  • Posts: 8684
  • Country: my
  • reassessing directives...
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #24 on: October 21, 2010, 02:02:24 am »
I would assume performing hacks like this will void any warranty so do it at your own risk and preferably after the warranty period has expired otherwise you have to take responsibility for repairing it.
i dont think sending legitimate RS232/USB command will void the warranty. for me, it shouldnt. even if we feed with random data, the scope should be well protected from that, as proven by Drieg sometime ago, RS232 comm is not so reliable, so meaning the Rigol design got flaw.
if something can select, how cant it be intelligent? if something is intelligent, how cant it exist?
 

Offline dimlow

  • Frequent Contributor
  • **
  • Posts: 301
  • Country: gb
  • Likes to be thought of as
    • Dimlow Ponders
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #25 on: October 21, 2010, 03:06:58 am »
I wonder if someone should approach Rigol and just ask them how they stand on this. It would be interesting to see what they have to say about the hack/ undocumented feature. Its obvious that they know about it.
 

Offline Mechatrommer

  • Super Contributor
  • ***
  • Posts: 8684
  • Country: my
  • reassessing directives...
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #26 on: October 21, 2010, 04:17:53 am »
I wonder if someone should approach Rigol and just ask them how they stand on this. It would be interesting to see what they have to say about the hack/ undocumented feature. Its obvious that they know about it.
i bet they wont reply. thats their "pant". and they know we keep peeping it, and so they will be busy try covering it. they forgot... thats the thing that makes us interested at them. ;)
« Last Edit: October 21, 2010, 04:20:13 am by shafri »
if something can select, how cant it be intelligent? if something is intelligent, how cant it exist?
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #27 on: October 21, 2010, 04:19:03 am »
@suppersready
If you purchased it from China, then sending the mainboard to me will be surely cheaper & faster solution (I'm from EU too). Drop me an email if you need my help...
Bricked Rigol? This thread might be of any help.
 

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 8106
  • Country: gb
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #28 on: October 21, 2010, 08:03:33 am »
In my experience manufacturers take a dim view of any attempted 'hack' of an equipments BIOS. They can probably see what was being attempted by the legacy corrupted data that remains in the memory chip  :( That is not to say that they will not repair it but in every case I have seen, the manufacturer has charged either an administration/handling fee or a 'calibration' fee. Neither is cheap and I have seen charges of between GBP50 and GBP400 quoted for such work. As soon as the OS memory area is corrupted by a user, the warranty is effectively invalidated as this is considered self inflicted unless proven otherwise. I agree that the user should not be able to accidentally damage the 1052E via RS232 but lets not kid ourselves..... Rigol knows that users are regularly attempting to hack the BIOS via this port so I doubt anyone would succeed in convincing them it was an accident.

Many manufacturers refuse to issue firmware updates. I have asked some why this is and had a similar response in each case "we do not wish to handle fault calls from users who have corrupted their equipments firmware due to poor practice or procedure". Such companies will often suggest that a firmware upgrade is normally required only if a problem exists that a later FW version fixes and the equipment should be sent to them for update and calibration.... Credit Card number please...... :'(

OT but relevant ...... I own an ICOM PCR1000 monitoring receiver that uses an unprotected EEPROM containing unique and very important calibration data. It was found that third party control software could and did corrupt the EEPROM data by accident and in an unpredictable fashion. ICOM never admitted any liability in the UK or USA and charged a hefty re-calibration fee. Their view was that the user shouldn't be messing with 3rd party software or the proprietary command set.

Drieg is probabably the only person who can help with a bricked Rigol and we are fortunate indeed that he wishes to use his time to help others.
« Last Edit: October 21, 2010, 08:06:48 am by Aurora »
 

Offline beerhunter

  • Contributor
  • Posts: 29
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #29 on: October 21, 2010, 08:24:13 am »
I wonder if someone should approach Rigol and just ask them how they stand on this. It would be interesting to see what they have to say about the hack/ undocumented feature. Its obvious that they know about it.

I actually asked the sales engineer at Rigolna about fixing a bricked scope and they said sure they can fix it but your warranty is shot and whats you credit card number? He also said they know all about the mod and told me to be very careful doing it as he knew what I was doing to it. He was very nice though.
« Last Edit: October 21, 2010, 08:28:04 am by beerhunter »
 

Offline sonicj

  • Frequent Contributor
  • **
  • Posts: 752
  • Country: us
  • updata successed!
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #30 on: October 22, 2010, 06:20:44 am »
manufacturers shouldn't take offense to customers trying to make better use of their products, they should take note! if the thing was perfect, people (most) wouldn't be dickin' around in the insides. "ohh, well apparently no-ones uses our product the way we thought they would and everyone thinks our user interface is garbage" etc.

i got greedy with my spektrum dx7 transmitter. 20 hours of runtime between charges wasn't enough (first gen w/nicads was 4hr) so i replaced the lm317 with a recom 7803 switching regulator. everything went great! until.... i was measuring current consumption of the new regulator and instead of flipping the unit off with the switch, i pulled the probe off the contact. whammy! blew out the eprom. the switch hard cuts power to eprom where as pulling the probe (battery) lets voltage slowly sag over about 5 seconds which apparently kills the thing.

im going for the good customer approach... im sending it back with 3 other genuine warranty claim items. hopefully they won't ream me a new one!
-sj
 

Offline Time

  • Frequent Contributor
  • **
  • Posts: 725
  • Country: us
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #31 on: October 22, 2010, 06:23:14 am »
PC LOAD LETTER!?  WHAT THE ^&%* DOES THAT MEAN!?
-Time
 

Offline TheDirty

  • Frequent Contributor
  • **
  • Posts: 440
  • Country: ca
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #32 on: October 22, 2010, 11:14:41 pm »
Mark Higgins
 

Offline sonicj

  • Frequent Contributor
  • **
  • Posts: 752
  • Country: us
  • updata successed!
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #33 on: October 23, 2010, 06:21:06 am »
well, the funny thing is the costumes :D if they are wearing the EEVBlog T-Shirt, that will become slightly a different picture. i was about to do that with my Rigol before Drieg comes to rescue.
you haven't seen The Best Movie Evaar?
-sj
 

Offline marianoapp

  • Regular Contributor
  • *
  • Posts: 67
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #34 on: October 23, 2010, 09:23:40 am »
you haven't seen The Best Movie Evaar?
the company where I work is certifying the ISO 9000 standards for quality management systems, so I'm gonna be filling TPS-like reports in no time  >:(
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #35 on: October 23, 2010, 07:23:40 pm »
Please guys, no off-topic in here. I'd like to keep this thread useful and small as possible...
Thanks  ;)
Bricked Rigol? This thread might be of any help.
 

Offline .o:0|O|0:o.

  • Regular Contributor
  • *
  • Posts: 131
  • Where is Higgs Boson?
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #36 on: October 24, 2010, 04:12:13 am »
In my experience manufacturers take a dim view of any attempted 'hack' of an equipments BIOS.

Then again, if you consider how popular the DS1052E has become as a consequence of being (not-so-)easily upgradable, how many have been purchased, destroyed or repaired (and the business that follows), and how the Rigol name now fills the eBay columns, Internet pages and the wet dreams of nerds world wide, you might be forced to conclude that if the "weakness" were intentional, "it well worked" as a pretty successful marketing strategy!

.o:0| 8) |0:o.


 

Offline suppersready

  • Contributor
  • Posts: 5
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #37 on: November 05, 2010, 09:04:41 am »
Hi all,

Drieg revived my Rigol scope after an unsuccesfully firmware update.


Thank you Drieg
 

Offline Meiner

  • Contributor
  • Posts: 9
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #38 on: November 07, 2010, 05:21:49 am »
Hi All,

a while ago I reported about bricking my DS1052E while attempting to downgrade. I then had some tries of my own to fix it, but then I bought a second scope and lost track of the bricked one, because I was frustrated and busy with my project for which I use the scope.
Thanks to Drieg it's today alive again. Another Driegol enhanced.... Thank you very much, Drieg!!!
 

Offline tyblu

  • Frequent Contributor
  • **
  • Posts: 287
  • Country: 00
    • blog.tyblu.ca
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #39 on: November 08, 2010, 06:07:00 am »
Could someone of repute, one we can trust to transfer the funds, setup a Paypal donation account for Dreig?
Tyler Lucas, electronics hobbyist
 

Offline watermeary2

  • Newbie
  • Posts: 1
    • birkenstock shoes
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #40 on: November 08, 2010, 02:55:59 pm »
   
The Dark Side of the Rigol Hack,it is very useful,thanks
chanel handbags are the most famous luxury brand bags in the world.
 

Offline Polossatik

  • Frequent Contributor
  • **
  • Posts: 286
  • Country: be
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #41 on: November 08, 2010, 10:50:08 pm »
Could someone of repute, one we can trust to transfer the funds, setup a Paypal donation account for Dreig?

The best person to do that is Drieg :)
If you're in the Euro zone then simply ask him his IBAN account nr (do not post it somewhere) and transfer what you want.
In contrast to Paypickpocket (for a $1 donation he will get only $0.67) it will mean that he get actually the amount you transfer and not amount minus    2.2% + $0.30 costs.
« Last Edit: November 08, 2010, 10:52:21 pm by polossatik »
Real Circuit design time in minutes= (2 + Nscopes) Testim + (40 +120 Kbrewski) Nfriends

Testim = estimated time in minutes Nscopes= number of oscilloscopes present Kbrewski = linear approx of the nonlinear beer effect Nfriends = number of circuit design friends present
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #42 on: November 09, 2010, 11:15:31 pm »
Could someone of repute, one we can trust to transfer the funds, setup a Paypal donation account for Dreig?

The best person to do that is Drieg :)
If you're in the Euro zone then simply ask him his IBAN account nr (do not post it somewhere) and transfer what you want.
In contrast to Paypickpocket (for a $1 donation he will get only $0.67) it will mean that he get actually the amount you transfer and not amount minus 2.2% + $0.30 costs.
Thanks guys for bringing up this topic.

I don't charge anything for my help or repair service, only the postage is to pay (if sending a flash chip is necessary). Of course, there is some work behind it, so if someone whom I helped with his broken scope offers me a small donation, then cool, I gladly provide my paypal account info. I must say, usually people are nice in this regard and most of them already donated me after we managed to fix their problem. Anyway, this is something totally voluntary and of course I'll help to anyone who is in trouble regardless of that. However, anybody who will support my development will not regret ;)
« Last Edit: November 10, 2010, 02:14:15 am by drieg »
Bricked Rigol? This thread might be of any help.
 

Offline dimlow

  • Frequent Contributor
  • **
  • Posts: 301
  • Country: gb
  • Likes to be thought of as
    • Dimlow Ponders
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #43 on: November 10, 2010, 04:36:01 am »
I have to admit i forgot to send him something, will be doing very soon.
 

Offline webrider99

  • Newbie
  • Posts: 2
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #44 on: November 10, 2010, 01:46:48 pm »
Looking forward to an unopened box brick fix. I am still awaiting my scope delivery and am hoping not to need this fix but will donate to help get this fix accomplished even if I never need it..
 

Offline teixeluis

  • Contributor
  • Posts: 20
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #45 on: November 17, 2010, 11:09:00 am »
Hi Drieg,

I have reported an issue I'm having, in this topic:

https://www.eevblog.com/forum/index.php?topic=553.255

I'm woundering if given the type of behaviour experienced, upgrading to FW 2.04 SP1 could be the solution in this case, considering that the HW version is unknown (it is blank after the
hack), and that the factory FW version was 2.02 SP2.

Is it possible to dump the full flash through JTAG? With a dump of the flash you could attempt a correction?

Thank you.

Regards,

lteixeira
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #46 on: November 18, 2010, 10:47:47 pm »
Hi lteixeira,
unfortunately you've corupted some of your factory calibration data (blame it on your fingers).
Drop me and email and hopefully we will find some solution...
Bricked Rigol? This thread might be of any help.
 

Offline M84AB1

  • Contributor
  • Posts: 29
  • Country: au
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #47 on: November 19, 2010, 04:26:46 pm »

  • Exhibits repetitive noise at high sampling rates after self calibration


Would you be able to provide us with a picture so that we can see what is considered repetitive noise? The trace on my Rigol 1052E has always had some noise and it is never just a straight trace. I have seen the same with other people's Rigols on youtube. I have recently hacked my Rigol to 100Mhz and it behaves the same the way it did before the hack. I would therefore love to see a picture so that I can know if the noise I am talking about is the same one that you are talking about.

Thanks in advance :-)
 

Offline teixeluis

  • Contributor
  • Posts: 20
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #48 on: November 25, 2010, 09:52:54 pm »
Thanks to Drieg the problem with my scope is now fixed. Hardware version and missing calibration parameters are now recovered/recreated.
While 2.04 SP1 firmware fixed the noise at time base below 500 ns/div, other not so obvious issues were still present, and all deriving from
a BW hack through the serial port. So, for those willing to attempt the BW increase, forget about the serial port method (don't get infected by
the enthusiasm expressed by Dave Jones's video). It's better go for more reliable methods such as USB, using the NI VISA tools.

lteixeira
 

Offline msh959

  • Newbie
  • Posts: 2
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #49 on: December 11, 2010, 09:31:40 pm »
Hi, I have or it's better to say I had DS1102E.When I press "Yes" button to update it's firmware it went blank and after that when I restart it there wasn't anything to saw in screen except some colored line.How can I repair it?Is this only way to sent DS1102 motherboard to Drieg?
 

Offline rudinietz

  • Newbie
  • Posts: 1
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #50 on: December 12, 2010, 03:10:11 am »
Hi,

I have a RIGOL DS1052D with LA-Module. After the hack to the DS1102 the noise  (<200ns/Div) is very high.
There can I find the original Firmware 00.02.04.01.00 for the HW58 DS1000D?

Please help me!
Thanks
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #51 on: December 12, 2010, 09:36:17 am »
@msh959
If you have the possiblitily to read/write the flash, you can send me only the dump file, otherwise you have to send me the mainboard or the flash chip.

@rudinietz
Try to ask Rigol for the fresh FW file for your unit.
Bricked Rigol? This thread might be of any help.
 

Offline darrylp

  • Regular Contributor
  • *
  • Posts: 127
  • Country: gb
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #52 on: December 15, 2010, 09:37:58 am »
so Drieg, do you have a copy of the 02.05 firmware yet ?

can i ask how you are recovering most of the failed flash attempts ?  does the JTAG connect to the flash chip ?


 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #53 on: December 17, 2010, 07:57:55 pm »
No, I don't have 02.05 FW yet. If anyone has it, I'd be interesing to look at it...

Check my 1st post in this thread for your question. Usually the flash desolder/read/write/solder cycle is needed. The JTAG connects to Blackfin only.
Bricked Rigol? This thread might be of any help.
 

Offline darrylp

  • Regular Contributor
  • *
  • Posts: 127
  • Country: gb
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #54 on: December 17, 2010, 09:36:34 pm »
No, I don't have 02.05 FW yet. If anyone has it, I'd be interesing to look at it...

Check my 1st post in this thread for your question. Usually the flash desolder/read/write/solder cycle is needed. The JTAG connects to Blackfin only.



first post, had indicated the blackfin jtag was daisy chained to the flash....
"The most common problem is totally dead scope after unsuccessful firmware "downgrade/upgrade". The only way to recover it is to reprogramm the flash chip (Spansion S29GL064N90TFI04) either via BlackFins's JTAG interface or in external programmer."


i've got a circuit board with the 02.05....    i've not got the tools to de-solder the flash.... but would be willing to send the board to you, if you have the tools to do the job.  ie. remove the flash, save copy,  place a lower version,  up the model number ;) ,  and then return the 02.05 firmware ?
of course i'd cover the postage both ways, but wouldn't want to send it until the new year ( as my country ( the UK ) is very back-logged on deliveries with the bad weather and the xmas rush )

prehaps continue in email ?
 

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 8106
  • Country: gb
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #55 on: December 17, 2010, 10:23:23 pm »
if you have the tools to do the job.  ie. remove the flash, save copy,  place a lower version,  up the model number ;) ,  and then return the 02.05 firmware ?
prehaps continue in email ?

Darrylp,

If Drieg is willing to do the work for you, I would recommend that you not return your scope to FW2.05 unless Drieg finds that the hardware requires it. As you have HW58 it is very likely that FW2.04SP1 will work perfectly with it and you will then have the ability to do further unofficial firmware updates in the future. FW2.05 would appear to be just a countermeasure release, hobbled to prevent unofficial firmware updates. From my understanding, Rigol were not intending to make any significant improvements to the 2.04 firmware. It's your decsion but given the opportunity I would prefer FW2.04SP1 to FW2.05.
 

Offline darrylp

  • Regular Contributor
  • *
  • Posts: 127
  • Country: gb
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #56 on: December 18, 2010, 12:27:24 am »
if you have the tools to do the job.  ie. remove the flash, save copy,  place a lower version,  up the model number ;) ,  and then return the 02.05 firmware ?
prehaps continue in email ?

Darrylp,

If Drieg is willing to do the work for you, I would recommend that you not return your scope to FW2.05 unless Drieg finds that the hardware requires it. As you have HW58 it is very likely that FW2.04SP1 will work perfectly with it and you will then have the ability to do further unofficial firmware updates in the future. FW2.05 would appear to be just a countermeasure release, hobbled to prevent unofficial firmware updates. From my understanding, Rigol were not intending to make any significant improvements to the 2.04 firmware. It's your decsion but given the opportunity I would prefer FW2.04SP1 to FW2.05.


yes, i see what you are saying, but the calibration data,  its location ( inferred by Drieg, to be easily corrupted and matched to hardware and firmware level ) would be wrong....  doing a replace of the 2.05 when done, means the scope will work.

if Drieg has ( i'm sure he does ) a DS1052e,  then he can use the board (my board ) with his screen / buttons whilst on a lower version of firmware .... even a calibration to see how it works,  and if needed can be returned to the 'snapshot copy of the firmware before calibration'

it's up to him,   hopefully from it, we will have a binary firmware 2.05 ( which can be used to flash back onto 'scopes )  i'm guessing the newer firmware is looking for a new upgrade filename,  and maybe some checksum (  once we have the file, we can see the CRC of it.  and maybe a file version inside the firmware rather than just in the header 21 bytes.)

either way, we move a step in the right direction to being able to 'unlock' the higher bandwidth in software of the DS1052e scopes. 

ps. this board in question 02.05 firmware is listed as H/W 58. so still no news of a newer hardware revision from the factory.


 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #57 on: December 20, 2010, 09:05:11 pm »
Aurora is right, if you have HW58, you should be able to run 02.04 SP1 without problems (after Self-Cal).

Unfortunately the flash dump and the firmware file are two (more or less) different things. Most probably they changed file header and/or implemented some kind of protection/encryption or maybe changed the file structure too. To be able to create working FW file from the flash dump, you have to exactly know how.

I think the only way is to wait until somebody manages to get the oficial 2.05 FW file...
Bricked Rigol? This thread might be of any help.
 

Offline killerwhale

  • Contributor
  • Posts: 20
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #58 on: December 24, 2010, 02:33:58 pm »
Hi, drieg. If we had a 2.05 FW dump file, would it not be possible by disassembling it to find out exactly how this firmware decides if the update is possible? Of course, if we could somehow find the entry point, init values, etc. Or am I missing something?
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #59 on: December 26, 2010, 06:24:33 am »
That would be definitely possible, as long as you have enough time, skills and tools to do so... ;)
Bricked Rigol? This thread might be of any help.
 

Offline scrat

  • Frequent Contributor
  • **
  • Posts: 606
  • Country: it
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #60 on: December 26, 2010, 10:31:41 am »
Aurora is right, if you have HW58, you should be able to run 02.04 SP1 without problems (after Self-Cal).

Unfortunately the flash dump and the firmware file are two (more or less) different things. Most probably they changed file header and/or implemented some kind of protection/encryption or maybe changed the file structure too. To be able to create working FW file from the flash dump, you have to exactly know how.

I think the only way is to wait until somebody manages to get the oficial 2.05 FW file...

I don't have a clear view of the whole thing (memory inside the Rigol). Could you please explain more in detail?
Are there two programmed memories, one inside the Blackfin and one on a flash chip? Where is (more probably) the calibration data contained? How did you guess that? Did you manage to extract the calibration data among all the memory?
I know this could be part of your professional knowledge, but I'd spend some money to have your insight! ;)

Another reason why I'm asking is that, if it's like I figured it out, writing all data taken from a 2.04SP1 (or 2.X) scope onto a newer one will make the hack possible, maybe at the cost of desoldering/writing/soldering and loosing calibration data.
Am I so wrong?

Thanks,
Sandro
One machine can do the work of fifty ordinary men. No machine can do the work of one extraordinary man. - Elbert Hubbard
 

Offline Fraser

  • Super Contributor
  • ***
  • Posts: 8106
  • Country: gb
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #61 on: December 28, 2010, 08:41:22 am »
FW 2.05 appears to be hackable  :-)

See here: https://www.eevblog.com/forum/index.php?topic=553.345

Having just checked 'Killerwhales' firmware file, it appears that Rigol changed the header contents to something non ASCII except for the DS1000E identifier. I presume Killerwhale has cut the header from a copy of FW2.05 but know not where he got it from.
« Last Edit: December 28, 2010, 08:54:27 am by Aurora »
 

Offline msh959

  • Newbie
  • Posts: 2
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #62 on: January 16, 2011, 11:36:30 pm »
Hi everyone,
I have DS1102E.About one month ago I wanted to update the firmware.So I downloaded a firmware and when I tried to update my Rigol it crashed and it didn't show anything in the LCD, so I started to search and find a way to repair it and suddenly I found Drieg in this forum.I send an E-mail to him and I told him what happen to my oscilloscope.After some question I found that the best way is to send the main board to him because I don't have a device to demount the spansion  IC. I live in Asia so it take 8 days to arrived.After that he sent a mail to me that he get the board and fix it.
I think the best way is to send the main board to him. You can just send An E-mail to him and ask him to help.When it finish and he send it back to you, you pay him for his work.
I'm really happy.I turn my Rigol on and saw the 2.05 version on the screen. :)
 

Offline nasser32

  • Newbie
  • Posts: 1
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #63 on: February 12, 2011, 08:45:11 am »
Hi everyone,
Youuuuuuuuuuuuuuuuuuhooooooooooooooooooo!!!
My RIGOL scope works fine again thanks to Mr. Drieg.
One year ago, I bought a RIGOL DS1052 scope and it was a good companion until I tried to hack it to a 1102.
I mistyped a character meanwhile and Yes, my scope ruined. It couldn't be used any more.
I searched to find some way to repair it. but I found that I can't do anything by myself.
when there was no hope,  I found Mr. Drieg and emailed him. after some questions about my problem, he could find a way to repeir it.
he did something for me that no one could do. he repair it "REMOTELY". he sent me a special manipulated firmware which could repair my scope even without openning its case.
He is so tallent I believe.
If you have a similar problem, ask him for help. I bet you'll never regret. this is the closest approach to repair your damaged scope.

>>>>  **** THANK YOU MR. DRIEG FOR YOUR GREAT HELP **** <<<<
 

Offline tonva

  • Contributor
  • Posts: 6
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #64 on: April 04, 2011, 05:05:46 am »
That would be definitely possible, as long as you have enough time, skills and tools to do so... ;)
Well, as for me, time and skills enough (retired), just tools missing. May be some cooperation will be useful for all involved?
 

Offline tonva

  • Contributor
  • Posts: 6
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #65 on: April 04, 2011, 05:17:27 am »
FW 2.05 appears to be hackable ..........
Current DS1052E's come with 02.05.02.00 firmware so the hack for 02.05.01 does not work.
The only long-term solution I see is some "nondestructive" method of firmware downgrade not based on Rigol's update tools.
(using JTAG or so). Has anyone some idea how it can be done?     
 

Offline d.giddy

  • Newbie
  • Posts: 1
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #66 on: April 06, 2011, 08:30:27 pm »
Very pleased to report that Drieg has managed to get my dead DS1052 going again. Here's my story:

- Purchased a DS1052E
- "Upgraded" it to a DS1102E using the widely available USB firmware procedure - seemed to work fine.
- Further updated the firmware to 02.04.03 to get the menus back - seemed to work fine.
- Have since then had an intermittent problem where the scope didn't always boot. Often got to the splash screen and then went to a grey screen with a few wavy lines. Usually only a problem if it had been in use for a while and then was turned off and turned back on. Would fairly reliably start when it was cold, but rarely if it was hot.
- Decided to downgrade back to the 02.02 firmware that I used for the initial patch in the hope of making the start more reliable. In the process the load seemed to fail about 80% through and after power cycling, I get a screen with wavy lines only - no splash screen.
- I sent the main board to Drieg who's got it going now with firmware 02.05.

Thanks Drieg!
 

Offline DenisRU

  • Newbie
  • Posts: 1
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #67 on: April 28, 2011, 10:59:25 pm »
Sorry for my english.

     Hi everyone!  I live in Russia. I wanted to tell you my story how I killed my Oscilloscope Rigol DS1052E. He came to me with firmware 00.02.05.02., At that time upgrate in DS1102E  was impossible. Not long ago there was information about how to do it. https://www.eevblog.com/forum/index.php?topic=553.msg42404#msg42404.
     In short, I flashed it. ... .. After that it could not run. The mood has fallen. I will not tell you how I did it ...
     I turned to Drieg. He told me to read a dump from the chip Spansion S29GL064N90TFI04 and send it back to him. If you’re interested in programming, I had a Triton + V5.7T http://www.triton-prog.ru. I ordered an adapter for this chip. Not the first time but I managed to read the data correctly.  Posted the dump to Drieg. Soon he sent me a corrected dump. I flashed the chip and soldered it in place. After that, my Rigol alive.
      I would like to express my deep gratitude to Drieg. Thanks very much to him! The world is not without good people. For more of these ...



« Last Edit: April 28, 2011, 11:02:18 pm by DenisRU »
 

Offline saturation

  • Super Contributor
  • ***
  • Posts: 4788
  • Country: us
  • Doveryai, no proveryai
    • NIST
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #68 on: April 28, 2011, 11:49:53 pm »
Great story.  Drieg's icon is very well deserved, and this thread is a valuable part of the forum.



Sorry for my english.

     Hi everyone!  I live in Russia. I wanted to tell you my story how I killed my Oscilloscope Rigol DS1052E. He came to me with firmware 00.02.05.02., At that time upgrate in DS1102E  was impossible. Not long ago there was information about how to do it. https://www.eevblog.com/forum/index.php?topic=553.msg42404#msg42404.
     In short, I flashed it. ... .. After that it could not run. The mood has fallen. I will not tell you how I did it ...
     I turned to Drieg. He told me to read a dump from the chip Spansion S29GL064N90TFI04 and send it back to him. If you’re interested in programming, I had a Triton + V5.7T http://www.triton-prog.ru. I ordered an adapter for this chip. Not the first time but I managed to read the data correctly.  Posted the dump to Drieg. Soon he sent me a corrected dump. I flashed the chip and soldered it in place. After that, my Rigol alive.
      I would like to express my deep gratitude to Drieg. Thanks very much to him! The world is not without good people. For more of these ...




« Last Edit: April 28, 2011, 11:52:01 pm by saturation »
Best Wishes,

 Saturation
 

Offline HB-1905

  • Newbie
  • Posts: 1
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #69 on: May 12, 2011, 06:31:00 am »
Just another chapter in the bricked Rigol DS1052E story:
- planning for the 1052 to 1102 hack
- during the FW downgrade it all seems fine but the reboot prompt at the end did not appear
- switched off/on (perhaps a retry would have been a better idea...)
- ... the scope was not a scope anymore

Looking the internet for other victims and indeed, there were more! Also found Drieg's contact details on this blog. Amazing: being in trouble to find such a (possible) escape! Lucky me, he was able and especially willing to help me. Sent the mainboard since I lack the skills to do the repair on my own.

After only one week the board was back again being sent from The Netherlands. I noticed he did the repair in about one hour! I know, he is professional but nevertheless. On the board there is no trace whatsoever of this repair. Even the numbered label on the chip is placed back very carefully. The (de)soldering? Simply perfect.

So, Drieg did the repair, upgraded to FW 2.05 and did the hack for me. You might call this the safest way ... His skills and service are really remarkable. Also communicating to this guy is enjoyable. I would almost advice to brick your scope on purpose ...
 

Offline Kitsyboy

  • Contributor
  • Posts: 5
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #70 on: June 10, 2011, 06:22:20 am »
Same story here,

I have a DS1052D which was running a very old firmware version (0105). I tried to hack the scope with the serial interface. Instead of ending the strings with a Linefeed character I accidentally typed CR. followed by some backspaces. After that the initial configuration data of the scope was gone. In the hardware info screen the Hardware version was messed up and the scope was 30% off spec.
(a 10 Volt signal appeared to be 6 volt on the scope).
Drieg has succesfully helped me to restore the initial data. He truly as an awful lot of knowledge about the inner workings of this scope.

Thanks again Drieg for unbricking the scope, and to everyone I would say: Never use the serial method, use the USB method which is far more safe.
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2989
  • Country: fi
  • Starting with DLL21
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #71 on: June 26, 2011, 07:46:54 pm »
@Shafi

.... i was going to test it against my 400Mhz HP54502A scope, but when i turned on my old reliable, she is no longer reliable. It popped up with Calibration Memory checksum error. So i spent quite a few hours trying to recalibrate it and failing, it seems that the old HP is dead now  ???



Off Topic. if need continue, then other thread.

My opinion is that your HP54502A need only new NVRAM and then need do perfect recalibration just following exactly service manual.

(54502A is very sensitive in calibration prosedure and it fails very easy. Sometimes it need some small adjustment before selfcal go ok but inside scope adjustments need special knowledge and instrumets - other way it only go more bad. Also you need good perfect set of calibration cables. )

After NVRAM change it first need factory default and then do ALL steps exactly as service manual explain for calibrating - The manual does not contain any unnecessary words or sentences.

If selfcal fails in any step --> stop and start totally beginning with full factory defaults (reset all selfcal data).
If it fails all times in same step then need do service manual adjustments exactly with required instruments.
If still fails there is HW problem. (mostly littlebit bad input attenuator module.)
Selfcal cables need be perfect quality, many coaxial cables with cheap noname BNC connectors may cause problem becouse specially shield connectors are loose. Also old machine BNC connectors may be dirty. (use pure isopropyl alcohol or "dry" video cleaner. Front BNC' do not use whatever "contact spray", they may damage input attenuator module behind BNC)

BTW 54502A is good scope specially for timing measurements. It is 6 bit adc but it is not problem if use this scope for purposes for what it have designed. (extremely nice is that it have real 50 ohm inputs for rf work. This can not solve using 50 ohm terminator in normal high imbedance input scopes)

If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline dimlow

  • Frequent Contributor
  • **
  • Posts: 301
  • Country: gb
  • Likes to be thought of as
    • Dimlow Ponders
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #72 on: June 26, 2011, 09:54:50 pm »
I have since fixed the scope, only needed some new NVRAM!
 

Offline rf-loop

  • Super Contributor
  • ***
  • Posts: 2989
  • Country: fi
  • Starting with DLL21
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #73 on: June 26, 2011, 10:56:13 pm »
I have since fixed the scope, only needed some new NVRAM!

Oh and just I find this: "dimlow on October 09, 2010, 12:43:39 PM"

So I have write comment to very old message what I accidentally find as I use some other "Search".

But, for common info, these scopes are most common  fails are repairable.
(today there is no company who make this quality in production or specially if look littlebit more old HP's)
EOOT (end of off topic ;) )
« Last Edit: June 27, 2011, 12:39:19 am by rf-loop »
If practice and theory is not equal it tells that used application of theory  is wrong or the theory itself is wrong.
It is much easier to think an apple fall to the ground than to think that the earth and the apple will begin to move toward each other and collide.
 

Offline dimlow

  • Frequent Contributor
  • **
  • Posts: 301
  • Country: gb
  • Likes to be thought of as
    • Dimlow Ponders
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #74 on: June 26, 2011, 11:47:48 pm »
I dont really see what your getting at, and im sure that last quote is not from me
 

Offline gm0otb

  • Contributor
  • Posts: 17
  • Country: gb
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #75 on: October 04, 2011, 11:59:52 pm »
I would just like to say a big thank's to Drieg for unbricking my DS1052E after an unsuccessful firmware downgrade attempt.

While attempting a downgrade (don't ask why!) I never received the "Updata successful" message, after turning the scope off, i was never to see life in the old Rigol again, well that's until Drieg breathed new life back in it :)

Thanks Drieg, for the excellent speedy service,  It was with pleasure I made a small donation, you are a credit to the hobby!

Ray. :)
 

Offline Balaur

  • Supporter
  • ****
  • Posts: 525
  • Country: fr
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #76 on: October 06, 2011, 03:46:28 am »
Hello all,

I will like to ask you a few questions. Sorry for barging in like that. I have tried to do my homework, but I'm still at loss with some issues and I'm kindly asking for your help. Much appreciated, thank you.

I'm looking at buying an used Rigol on eBay. The seller modded the scope and it looks like the conversion was successful, in the sense that the model is identified as a DS1102E and the firmware version is 2.02 SP2.

Q1: The other picture shows the scope displaying the internal calibration signal at an amplitude of 300 mV and with a frequency of 1.000KHz (or something like that - the picture is small). Is there any way to check whether the calibration data has been corrupted or not from this very limited info?

Q2: I don't know the hardware revision. The scope seems to be an older version, with the UltraZoom label. Is the serial number useful? Does the HW rev matters?

Q3: Is any useful stuff in later DS1052 firmware revisions that will not longer work on the modded scope? Are newer DS1102 firmwares usable?

Thank you all,
Dan
 

Offline torch

  • Frequent Contributor
  • **
  • Posts: 339
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #77 on: October 06, 2011, 08:23:48 am »
AFAIK, while later hardware versions cannot run early firmware, the opposite is not true: early hardware versions can run the later firmware. (2.04 SP1 is as late as you would want though -- after that, the firmware seems to be buggy).

2.02 SP2 was the last firmware that allowed changing the model number (and hence, allowed the hack). In order to hack a later model, the firmware must first be downgraded to 2.02 SP2, model changed, then the firmware upgraded again before using the scope.

There is a hidden screen that will reveal the hardware version. Press Utility, then advance to page 3 of 3, then System Info. Now, to reveal the hidden screen:

Press Ch1 twice
Press Ch2 twice
Press Math once

Now the screen will show extra info, including the hardware version. H/W 58 is the later version that won't run properly on firmware 2.02. You could ask the seller to send you a picture of that screen.
 

Offline Balaur

  • Supporter
  • ****
  • Posts: 525
  • Country: fr
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #78 on: October 06, 2011, 10:37:36 pm »


Good suggestions. Thank you very much!
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #79 on: October 07, 2011, 01:17:56 am »
Q1: I'm afraid that a bit too little info. There is probably only wrong probe ratio selected (1:1 instead of 1:10), the amplitude of probe compensation output shoudl be about 3V. Try to ask if the hack was done vie serial or USB (USB is safe, while using serial cable there is a risk of corrupting calibration data).

Q2: There is not much diffrerence bewen them. Early units didn't have LED backlight for example, PM me s/n if you have it (3-6 initial numbers are enough) and I can tell you more...

Q3: No, hacked DS1052E scope is same as original DS1102E from the sw point of view. There is no way for the firmware to detect a modded unit (if the hack is done properly). All new firmwares works with older units.
« Last Edit: October 09, 2011, 12:13:05 am by drieg »
Bricked Rigol? This thread might be of any help.
 

Offline dougsisco

  • Newbie
  • Posts: 3
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #80 on: October 18, 2011, 12:54:09 am »
Thanks to Drieg for fixing my DS1052E!  After attempting the notorious serial port Rigol hack and using the 'enter' key instead of ALT-0-0-0, the delayed-trigger was broken and the hardware revision was scrambled. Drieg created a special 'repair' firmware which fixed the problem; very cool!
 

Offline jeremy

  • Frequent Contributor
  • **
  • Posts: 894
  • Country: au
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #81 on: October 20, 2011, 10:26:33 am »
Hey guys,

Drieg just helped me out with his scope, sent me a repair firmware and it works perfectly now. Somebody give this guy a job!

-jeremy
 

Offline dixis

  • Newbie
  • Posts: 2
  • Country: kz
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #82 on: January 23, 2012, 07:40:55 pm »
Hi to all,
A week ago i have received my ds1052e. The same day i hacked him in 1102E. The original firmware was 2.0.6. It was downgraded to 2.0.2 SP2. Then i changed  it`s serial number. He became 1102E. After that i upgrade him to 2.0.4 SP1. All was fine. After 30 minutes of playing i decided to upgrade it to it`s original 2.0.6 firmware. And then the problems started. Progress bar filled up only 70-80 percent and disappeared without "firmware is successful"  or something like that message. Without a second thought, I rebooted it. After power up it shows nothing. Only keyboard back lights were randomly lighting after each power-up. I have successfully read the firmware of spansion flash-memory via JTAG. Now I can not do anything because I do not know how the 4MB firmware placed in memory map. Could anyone help me? The board has some inscriptions 94V-0 and DEMO8 and a date 2010-12-20. Here is the external link to my broken 2.0.6 firmware (sorry, but i don`t know how to attach files larger than 1MB) http://hotfile.com/dl/143324806/25ead70/broken_2.0.6.bin.zip.html

Regards
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #83 on: January 25, 2012, 07:12:42 pm »
...solved via PM/email.
Bricked Rigol? This thread might be of any help.
 

Offline wkb

  • Frequent Contributor
  • **
  • Posts: 535
  • Country: nl
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #84 on: January 26, 2012, 06:41:42 am »
...solved via PM/email.

Another guy that owes you a couple of beers!  ;D 

Although my hack proved a smooth operation, knowing you were there in case it went south was what made me willing to take the risk!
 

Offline kvitekp

  • Newbie
  • Posts: 3
  • Country: us
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #85 on: February 01, 2012, 01:14:28 pm »
Hello all! What a fascinated reading!

Just got myself a brand new Rigol DS1052E with s/w 00.02.05. SP2 and h/w 58 and I'm considering a 100MHz hack. Just wanted to check if Drieg is still out there offering his lifesaving service?

/Peter
 

Offline jgbena

  • Contributor
  • Posts: 25
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #86 on: February 04, 2012, 05:06:02 am »
Yeah I just bought one of these... still in the Shipping phase and now I'm scared to try hacking it!!!
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #87 on: February 05, 2012, 08:39:52 pm »
Yes, I'm still here, ready to help with broken Rigol units (not only DS1052E/D, but also others)  8)
Bricked Rigol? This thread might be of any help.
 

Offline jbremnant

  • Newbie
  • Posts: 1
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #88 on: February 06, 2012, 02:20:39 pm »
Wow, I wish I found this thread before I tried out the hack.
I was on 2.05.02 firmware and tried to downgrade to 2.02.02.
Didn't work, and now my DS1052E scope is bricked with blank screen.

I am trying the warranty route since I got it only few days ago.
If I don't have any luck, I hope our "superhero" Drieg can help me out. 
 

Offline Yakovlev

  • Newbie
  • Posts: 1
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #89 on: April 11, 2012, 10:03:47 pm »
Thanks again to Drieg for restoring corrupted calibration on my 3 year old HW03 box.
Brgds, Rob
 

Offline matthewell

  • Contributor
  • Posts: 7
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #90 on: July 13, 2012, 01:40:23 am »
Hey has anyone got the jtag port working, i have been trying for a couple days and got only garbage from the TDO pin.

Any help would be great, Matt.
 

Offline dixis

  • Newbie
  • Posts: 2
  • Country: kz
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #91 on: July 18, 2012, 09:25:24 pm »
Hi matthewell,
could you post the connection schematic which you have used for jtag and what the software that handles this
 

Offline sim

  • Newbie
  • Posts: 4
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #92 on: November 13, 2012, 01:00:59 pm »
Hello! My DS1052E purchased in January, 2010 has always displayed a blank "HardVersion" in (extended) System Info. It reads:

00.02.02.02.00
DSP: 02.15
FPGA:02.00
HardVersion:

I recently upgraded it to 2.06 to try to fix usbtmc timeouts (which turned out to be a host problem anyway). This seems to have introduced an ADC offset problem that causes about a half div noise at any voltage scaling, any channel. It is obvious with peak-detect at any sweep rate, or 200us or faster in normal mode. Calibration does not fix it, but reverting to 2.02sp2 makes it all good again. I'm thinking that the new software is defaulting to assuming a newer hardware rev if the field is blank, and breaking the ADC calibration. Any ideas on this? If it can be set, I wonder what it should be set to.
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #93 on: November 14, 2012, 08:58:54 am »
Hi sim,
we have to find out the hardware version of your unit (from the serial number or better from PCB version) and then we can fix it. Please contact me via PM/email.
Bricked Rigol? This thread might be of any help.
 

Offline sim

  • Newbie
  • Posts: 4
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #94 on: November 20, 2012, 07:31:11 am »
we have to find out the hardware version of your unit (from the serial number or better from PCB version) and then we can fix it.

So, we did this, and it fixed the problem! Restoring the "HardVersion" to 07 (my board was marked "DEM07") allowed me to upgrade to 2.06 without the ADC offset problem that was present before when the field was blank. It seems my assumptions about the software assuming a newer hardware version were correct. My realtrigdelay/equtrigdelay were also wiped to 0 and I decided to also calibrate those -- not sure what I did originally. Thanks, drieg!
 

Offline matthewell

  • Contributor
  • Posts: 7
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #95 on: November 23, 2012, 04:44:53 am »
Hi matthewell,
could you post the connection schematic which you have used for jtag and what the software that handles this

Hey i am using the bus blaster jtag device with urjtag, have you had any luck?


Thanks, Matt.
 

Offline equinoxefr

  • Contributor
  • Posts: 6
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #96 on: January 01, 2013, 06:13:10 am »
Hi Drieg,

I upgraded my DS1052E today from 3.01 to 2x, hack to 1102E then upgrade to 4.0. Everything has worked but now i've a blank hardversion instead of 58. Is it a problem ?

Regards

Pierre
« Last Edit: January 01, 2013, 06:14:54 am by equinoxefr »
 

Offline equinoxefr

  • Contributor
  • Posts: 6
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #97 on: January 16, 2013, 07:45:28 am »
Little update of my previous post.

Drieg helped me to fix my problem. I lost hw version but I also lost trigger delay calibration.

With the help of Drieg, I try to set calibration data but without success. I can enter calibration data but it was lost upon power off.  So I downgraded my scope from 4.0 version to 3.01 and try again to fix it. Now it work like a charm, I can input trigger delay and fix that annoying problem ;-)

A great thanks to Drieg, our Rigol doctor ;-)
 

Offline Blogs14

  • Contributor
  • Posts: 9
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #98 on: January 22, 2013, 08:25:22 am »
Hi equinoxefr,

I think I have the same problem as you did, but I can't seem to find 3.01 firmware file anywhere.
Where did you find it? Do you think you can post a link?

Thanks in advance.
 

Offline equinoxefr

  • Contributor
  • Posts: 6
Re: Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #99 on: January 22, 2013, 05:13:18 pm »
Hi equinoxefr,

I think I have the same problem as you did, but I can't seem to find 3.01 firmware file anywhere.
Where did you find it? Do you think you can post a link?

Thanks in advance.

Hi,

I found it on microcontroller.net a little Google search and you will find it. I ask me if you can't grab it.

Pierre

Envoyé depuis mon Nexus 7 avec Tapatalk
 

Offline Blogs14

  • Contributor
  • Posts: 9
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #100 on: January 23, 2013, 10:33:10 pm »
Well that's embarrassing, don't know how I missed that file when I was looking the first time.

Anyway here's the link and checksum for anyone else:
http://www.mikrocontroller.net/attachment/147456/DS1000EUpdate.zip
MD5: eac4f449e60e2fe3cec561cbfa543bed

(From: http://www.mikrocontroller.net/topic/261138)

Problem is I still can't get the trigger delay calibration to save between power-ups. It doesn't seem to make a difference which firmware I try.

I know this isn't very serious, but it annoys me that the scope isn't perfect.

Any ideas?

EDIT:
I've managed to sort it out now. In the end I tried FW 4.00 again and set the trigger delay calibration. Then, without powering off, I ran auto calibration and now the settings have been saved. Although the auto calibration changed them slightly, they're pretty much perfect.
« Last Edit: January 24, 2013, 05:46:18 am by Blogs14 »
 

Offline pomonabill221

  • Frequent Contributor
  • **
  • Posts: 252
  • Country: us
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #101 on: March 17, 2013, 01:28:53 pm »
we have to find out the hardware version of your unit (from the serial number or better from PCB version) and then we can fix it.

So, we did this, and it fixed the problem! Restoring the "HardVersion" to 07 (my board was marked "DEM07") allowed me to upgrade to 2.06 without the ADC offset problem that was present before when the field was blank. It seems my assumptions about the software assuming a newer hardware version were correct. My realtrigdelay/equtrigdelay were also wiped to 0 and I decided to also calibrate those -- not sure what I did originally. Thanks, drieg!
I, too have DEM07.
I have performed the hack to a DS1102E and it worked, and applied FW version 2.04.00.03 but do not have a hardware version, just jumbled characters.
When I did the serial update (I know, I know), I did accidently hit ENTER rather than ALT 000, but it seemed to take ok.
Now I am wondering if my cal data is corrupt because of the missing HW version?
How did you do it?  I see all these posts saying they had success, but NO ONE has said HOW it was done, or is this being kept a guarded method so it won't be done for fun?
 

Offline jamess

  • Newbie
  • Posts: 2
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #102 on: January 22, 2014, 12:21:07 pm »
I've managed to brick my 1052e attempting a firmware downgrade :palm:


Drieg, you you have a moment I've sent you a PM with the details, any help/advice is appreciated.

--J
 

Offline jamess

  • Newbie
  • Posts: 2
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #103 on: February 02, 2014, 01:59:04 am »
My bricked DS1052e is all fixed up, huge thanks to drieg.

 

Offline pomonabill221

  • Frequent Contributor
  • **
  • Posts: 252
  • Country: us
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #104 on: February 02, 2014, 04:42:18 am »
That's not fair!!! leaving us in the dark as to what you did to revive your scope!
Did it involve using the JTAG connection?

Good to hear you got your baby back!
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #105 on: February 02, 2014, 09:12:26 pm »
My bricked DS1052e is all fixed up, huge thanks to drieg.
That's not fair!!! leaving us in the dark as to what you did to revive your scope!
Did it involve using the JTAG connection?

Good to hear you got your baby back!
Yes, if the unit doesn't start at all, you need to reprogramm the flash either in external programmer or via JTAG (as we did in this case).

I'll update my first post with more details when I find the time...
« Last Edit: February 02, 2014, 09:13:59 pm by drieg »
Bricked Rigol? This thread might be of any help.
 

Offline pomonabill221

  • Frequent Contributor
  • **
  • Posts: 252
  • Country: us
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #106 on: February 03, 2014, 07:22:08 am »
Thanks for the info... kinda thought so but wanted to make sure.
 

Offline szist

  • Newbie
  • Posts: 2
  • Country: pl
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #107 on: March 17, 2014, 02:32:13 am »
I got the Rigol DS1052E after uploading the incorrect firmware . When you turn on the Oscilloscope , nothing is displayed only bright screen. USB does not work. Please help in the recovering the operation via JTAG or reprogramming the flash of chip.
 

Offline szist

  • Newbie
  • Posts: 2
  • Country: pl
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #108 on: April 04, 2014, 03:20:52 am »
I wanted to thank Drieg in repairing DS1052E. He sent repaired firmware, and I could upload it via JTAG and my oscilloscope alive. Direg is great and I am very grateful to him for taking the time.  : :-+
 

Offline Alliyou David

  • Newbie
  • Posts: 1
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #109 on: November 10, 2014, 02:32:09 pm »
Dear Drieg: Can you send the firmware mentioned in your blog to my E_Mail:David760190@hotmail.com?Thank you very much.
 
The following users thanked this post: ivi_yak

Offline merseyless

  • Contributor
  • Posts: 10
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #110 on: November 19, 2014, 11:53:48 am »
Hi there, I have a ds1052e that has been bricked. What steps do I have to go through to fix it?
 

Offline Zaq

  • Newbie
  • Posts: 4
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #111 on: June 13, 2015, 03:57:25 am »
Can some one help me out to get my Rigol DS1052E working again?
Did the 100MHz hack, that worked fine.
Than i want to upgrade firmware and the scope is compleet
dead.
Only white screen, nothing else.
Can you give me instructions what to do.
I dont have a jtag op external programmer.

With regards,
 

Offline saberonline

  • Newbie
  • Posts: 2
  • Country: ir
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #112 on: February 04, 2016, 08:20:33 am »
@drieg

Hi drieg,
We have a Rigol DS1052E with damaged FLASH chip (unsuccessful FW upgrade).
Also, We have a TSOP48 FLASH Programmer with ZIF socket and new flash chip (S29GL064N90TFI04),
but We don't have the flash dump that compatible with my scope HW and PCB revision.
Some texts that printed on PCB are "DEM07" and "Bulbul Mainboard Ver. 0.2 2008/05" and "10 12".
I think the HW Rev. is "07" and the PCB Rev. is "1012".
Could you help me please ?
Thanks for your help.

----------------------------------------------------

Thanks a lot drieg, my problem was solved with your help  :-+
« Last Edit: January 24, 2017, 10:04:57 pm by saberonline »
I'm sorry for my bad English. :palm:
 

Offline ENB

  • Newbie
  • Posts: 1
  • Country: es
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #113 on: March 02, 2016, 10:27:06 am »
Hi,

Any news for unbrick our scopes? :(

Thanks in advance
 

Offline pantelei4

  • Regular Contributor
  • *
  • Posts: 51
  • Country: ua
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #114 on: January 22, 2017, 06:07:53 pm »
Hi, who knows how to communicate with drieg ?
I broke my Rigol 1052E, corrupted calibration data. |O
Last time he was here November, 2016.
I left him a message, unanswered ...
 

Offline saberonline

  • Newbie
  • Posts: 2
  • Country: ir
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #115 on: January 22, 2017, 10:38:32 pm »
Hi, who knows how to communicate with drieg ?
I broke my Rigol 1052E, corrupted calibration data. |O
Last time he was here November, 2016.
I left him a message, unanswered ...

Hi,
Please check your PM, I sent you a message.
I'm sorry for my bad English. :palm:
 

Offline pantelei4

  • Regular Contributor
  • *
  • Posts: 51
  • Country: ua
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #116 on: January 24, 2017, 09:01:40 pm »
Thank you, who responded. I restored my oscilloscope itself. After an unsuccessful upgrade was lost HW version=? Therefore, it is uncalibrated. The board has DE03 inscription means HW version=03. With the help of the serial interface and the command :INFO:HARDVERSION 03 value was restored.
Then I set the FW version 00.02.04.01.00 and spent calibration. Everything works fine, it cost me a few days of nerves. I agree with drieg, need to be very careful and neat, when you want something else to do.
« Last Edit: January 24, 2017, 09:26:13 pm by pantelei4 »
 
The following users thanked this post: saberonline, ivi_yak

Offline dberdugo

  • Newbie
  • Posts: 1
  • Country: es
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #117 on: May 18, 2017, 06:36:13 am »
Hello, thanks all for share your experiences and information about our Rigol oscilloscopes.

My case takes about a DS1052D wich I bought less than a year ago, finally I decided to upgrade to DS1102D and got an expensive brick.
This is DS1052D, HW version 58, FW version 00.04.02 SP1, and the serial number is DS1EU175000xxx

Obviously serial commands to change serial and model didn't work.
I tried downgrade directly using "DS1000DUpdate.RGL", the oscilloscope detected pendrive but didn't perform any flashing process.
I tried to modify the header of the FW file to identify the same version as my unit and later, but nothing happens.

Finally I decided to desolder the flash for myself, made a backup with an external programmer, and changes the serial letters (to DS1EA) and model name (DS1102D) at the binary image, but when solder again, the oscilloscope was dead :(
I retried with many images extracted from official FW upgrade files, removing the header and concatenating the 4MB image of this file with the last 4MB of my original backup wich contains serial, model name and suposed calibration data, but the oscilloscope remained dead.

Finally, I got scared and restores exactly the original backup and the oscilloscope breathed again, got back to live, but when enable any channel (analog or logic analyzer) it shows random garbage waveforms, does not matter if I connect the probes to an stable 5V, GND or test waveform pin :(
I performed many times the autocalibration procedure, this makes many tick-tick sounds, complete the progress bars, but when finished, it shows the same behaviour.

I think the factory calibration data is on flash, and I restored the original backup, so it must have this data intact.
Anyone knows how is happening inside my oscilloscope?

Thanks and greetings.
Daniel
 
The following users thanked this post: ivi_yak

Offline ivi_yak

  • Contributor
  • Posts: 40
  • Country: 00
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #118 on: July 21, 2017, 04:32:11 am »
hi
I have a brick after firmware updating of DS1302CA |O
Could you post a manual for reflash or advice what to do?
Please post any info about repairing of software bricked RIGOLs
eevblog
 

Offline ivi_yak

  • Contributor
  • Posts: 40
  • Country: 00
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #119 on: July 21, 2017, 04:46:06 am »
hi, could you share what king of programmer you use for reflash and it will be great for instructions
thanks!
eevblog
 

Offline Bruzzel

  • Newbie
  • Posts: 2
  • Country: de
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #120 on: January 19, 2019, 10:25:49 am »
Hello,

I have flash a wrong firmware to my old DS1042C and now it is dead, nothing works. |O
What can I do to fix my bricked scope?
Where can I find information and correct Hex-data for reprogramming the Flash?

The DS1042C board is very similar to the DS1042E Board but has only a S29GL032A flash
 (not a S29GL064 flash) and has no second front USB-Port near the serial EEPROM.

The last firmware was 02.03.16.

Can anybody help me?


 

Offline jarek007

  • Newbie
  • Posts: 1
  • Country: pl
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #121 on: January 19, 2019, 11:22:30 pm »
Hello, When modifying DS1052E probably lost the calibration data - corrupted calibration data. Uploaded firmware 00.04.02 SP1. Interference occurs without a signal.
Please help.
Who knows how to communicate with Drieg
I apologize for the language, but I write from the translator
Jarek
« Last Edit: January 20, 2019, 09:55:00 pm by jarek007 »
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #122 on: February 06, 2019, 09:17:34 pm »
Hello Jarek,

drop me a PM, I will look at it.
Bricked Rigol? This thread might be of any help.
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #123 on: February 06, 2019, 09:20:04 pm »
Hello,

I have flash a wrong firmware to my old DS1042C and now it is dead, nothing works. |O
What can I do to fix my bricked scope?
Where can I find information and correct Hex-data for reprogramming the Flash?

The DS1042C board is very similar to the DS1042E Board but has only a S29GL032A flash
 (not a S29GL064 flash) and has no second front USB-Port near the serial EEPROM.

The last firmware was 02.03.16.

Can anybody help me?

Can you read the flash content? You can do it via JTAG, external programmer or send me the board for repair..
Bricked Rigol? This thread might be of any help.
 

Offline drieg

  • Regular Contributor
  • *
  • Posts: 85
  • Country: cz
    • Silcon Electronics
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #124 on: February 06, 2019, 09:21:36 pm »
hi
I have a brick after firmware updating of DS1302CA |O
Could you post a manual for reflash or advice what to do?
Please post any info about repairing of software bricked RIGOLs
Hello,

sorry for late reply. Have you managed to fix your problem? If not, feel free to contact me..
Bricked Rigol? This thread might be of any help.
 
The following users thanked this post: ivi_yak

Offline ivi_yak

  • Contributor
  • Posts: 40
  • Country: 00
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #125 on: February 07, 2019, 07:14:28 am »
 :-+
eevblog
 

Offline ivi_yak

  • Contributor
  • Posts: 40
  • Country: 00
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #126 on: February 23, 2019, 10:24:59 pm »
Thanks Mr. Drieg he fix my dump and scope alive now   :-DMM,
I have bricked Rigol ds1302CA after unsuccessfully fw update.
Using XGecu TL866II Plus http://www.xgecu.com/en/ with TSSOP48 adaptor I got a memory dump of S29GL032A90TFIR40.
Drieg fixed my dump at few days and my scope restored now.

eevblog
 

Offline Bruzzel

  • Newbie
  • Posts: 2
  • Country: de
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #127 on: February 24, 2019, 04:29:08 am »
I have fix my Rigol DS1042C.
I have unsolder the flash and read it. I found the first part of the firmware file identical at the flash, only the first 20 byte was cut off and the last bytes were different.

I suspect the following: 

The ds1000 firmware starts after 20 byte at the firmware USB file and ends at address 0x1FFFFF.
The ds1000D/E firmware file starts after 21 bytes at the firmware USB file and have double length up to 0x3FFFFF.
 
The DS1042C firmware update is a very stupid program. If it finds a file with the name “DS1000DUpdate.RGL” at the USB stick it cut off the first 20 bytes an write it 1:1 to the flash without any check.
 
Only the bytes after address 0x1FFF00 are not changed because there are individual data about the scope (model, serial no. etc.) and after 0x200000 there are some other calibration data.

The A21 = address input and WE# = Write Enable input are not connected at my Rigol DS1042C with flash S29GL032A.

After cut off the first 20 bytes of the firmware file and program the bytes 0x000000 to 0x1FFF00 to the flash and solder it back to the board the rigol works correct.  :-+

It is not easy to solder a TS048 device!  :--

I have made a firmware update to 3.7.1 and change it to a CA1102C 100Mhz model, see Andreas Schuler's homepage:
http://codenaschen.de/tichyblog/index.php?action=blog&entry=17_Hacking%20Rigol%20DS1022C%20DS1042C%20DS1062C%20DS1102C]
[url]http://codenaschen.de/tichyblog/index.php?action=blog&entry=17_Hacking%20Rigol%20DS1022C%20DS1042C%20DS1062C%20DS1102C
[/url]

Thank you drieg for help!   :-+
 

Offline giov

  • Newbie
  • Posts: 3
  • Country: fr
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #128 on: March 07, 2019, 12:46:04 am »
Hi,
I was trying to upgrade my DS1102D to last firmware, and after few minutes stuck a 50% I decided to reboot it :bad idea  |O
Now I only got white screen and random keyboard status after each reboot.
I have no idea how to get it alive again : I have no programmer, and I don't know how to use JTAG interface  :-[ .
Can someone help me out ?
 

Offline ivi_yak

  • Contributor
  • Posts: 40
  • Country: 00
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #129 on: March 07, 2019, 03:11:00 am »
Hi, in this case only reflash memory help
eevblog
 

Offline giov

  • Newbie
  • Posts: 3
  • Country: fr
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #130 on: March 07, 2019, 03:24:58 am »
OK, How can I reflash ? Do I need a programmer of is it possible via jtag ?
 

Offline ivi_yak

  • Contributor
  • Posts: 40
  • Country: 00
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #131 on: March 07, 2019, 04:03:28 am »
You need to build jtag chain, basically it's BlackFin and altera and using wiggler cable or j-link get your dump.
eevblog
 

Offline giov

  • Newbie
  • Posts: 3
  • Country: fr
Re: The Dark Side of the Rigol Hack -- Bricked Scope & How to Fix it...
« Reply #132 on: March 07, 2019, 08:07:23 am »
I have got a pirate's v3 card, and I installed openocd : can I reflash with it ?
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf